CVE-2020-4840: High severity ibm security secret server vulnerability
IBM Security Secret Server 10.6 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 190044.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID of the IBM Security Secret Server vulnerability?
The vulnerability ID is CVE-2020-4840.
What is the severity rating of CVE-2020-4840?
The severity rating of CVE-2020-4840 is high (6.1).
How does CVE-2020-4840 allow a remote attacker to conduct phishing attacks?
CVE-2020-4840 allows a remote attacker to conduct phishing attacks using an open redirect attack.
How can CVE-2020-4840 be exploited by an attacker?
An attacker can exploit CVE-2020-4840 by persuading a victim to visit a specially crafted website.
Is there a patch or fix available for CVE-2020-4840?
Please refer to IBM's support page for information on patches or fixes available for CVE-2020-4840.